Jon Chery 10bcb49514 fix(P15): file-mode audit expansion (REQ-130, F13) ...

---ci---
project: orca
phase: 15
milestone: v0.12
status: execute
---/ci---

EnforceFileModes now checks SSH key, known_hosts, master.key,
master.key.sealed, server.key (0600) + orca_ssh_key.pub, server.crt
(0644). Missing files skipped (may not exist before init or after
step-ca migration). All security tests pass. Build green.

2026-08-07 11:25:02 +00:00

..

testdata

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

ca.go

fix(P15): file-mode audit expansion (REQ-130, F13)

2026-08-07 11:25:02 +00:00

certgen_test.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

csr.go

feat(P00): deprecation sweep + bash tooling gate + render contract + doc banners (v0.9 P00)

2026-08-05 16:26:26 +00:00

doc.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

fingerprint.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

flock_test.go

feat(P0c): Job/Service/DaemonSet schemas + emitter interface + systemd stub (REQ-074)

2026-08-05 17:17:02 +00:00

flock.go

feat(P0c): Job/Service/DaemonSet schemas + emitter interface + systemd stub (REQ-074)

2026-08-05 17:17:02 +00:00

integration_test.go

feat(P08): mTLS daemon + transport + cert CLI + doctor

2026-06-03 21:33:41 +00:00

redact.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

rotation.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

security_gosec_g101_test.go

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

security_scan_test.go

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

sshkey_test.go

feat(security): SSHFingerprintSHA256 helper (T02.1, REQ-058)

2026-08-04 11:35:59 +00:00

sshkey.go

refactor(security): export WriteAtomic (T02.2, REQ-059)

2026-08-04 11:36:42 +00:00

tls_config.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00